RHSA-2007:1069Medium

Red Hat Security Advisory: tomcat security update for Red Hat Network Satellite Server

Published
November 26, 2007
Last Modified
January 6, 2026

🔗 CVE IDs covered (7)

CVE-2005-2090 →CVE-2005-3510 →CVE-2006-3835 →CVE-2007-0450 →CVE-2007-1858 →CVE-2007-3382 →CVE-2007-3385 →

📋 Description

CVE-2005-2090 — tomcat multiple content-length header poisioning CVE-2005-3510 — tomcat DoS CVE-2006-3835 — tomcat directory listing issue CVE-2007-0450 — tomcat directory traversal CVE-2007-1858 — tomcat anonymous cipher issue CVE-2007-3382 — tomcat handling of cookies CVE-2007-3385 — tomcat handling of cookie values

🎯 Affected products28

  • Red Hat Satellite 5.0 (RHEL v.4 AS)
  • Red Hat Satellite v 4.0 (RHEL v.3 AS)
  • Red Hat Satellite v 4.0 (RHEL v.4 AS)
  • Red Hat Satellite v 4.1 (RHEL v.3 AS)
  • Red Hat Satellite v 4.1 (RHEL v.4 AS)
  • Red Hat Satellite v 4.2 (RHEL v.3 AS)
  • Red Hat Satellite v 4.2 (RHEL v.4 AS)
  • jakarta-commons-pool-0:1.2-2jpp_2rh.noarch as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)
  • jakarta-commons-pool-0:1.2-2jpp_2rh.noarch as a component of Red Hat Satellite v 4.0 (RHEL v.3 AS)
  • jakarta-commons-pool-0:1.2-2jpp_2rh.noarch as a component of Red Hat Satellite v 4.0 (RHEL v.4 AS)
  • jakarta-commons-pool-0:1.2-2jpp_2rh.noarch as a component of Red Hat Satellite v 4.1 (RHEL v.3 AS)
  • jakarta-commons-pool-0:1.2-2jpp_2rh.noarch as a component of Red Hat Satellite v 4.1 (RHEL v.4 AS)
  • jakarta-commons-pool-0:1.2-2jpp_2rh.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)
  • jakarta-commons-pool-0:1.2-2jpp_2rh.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)
  • tomcat5-0:5.0.30-0jpp_6rh.noarch as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)
  • tomcat5-0:5.0.30-0jpp_6rh.noarch as a component of Red Hat Satellite v 4.0 (RHEL v.3 AS)
  • tomcat5-0:5.0.30-0jpp_6rh.noarch as a component of Red Hat Satellite v 4.0 (RHEL v.4 AS)
  • tomcat5-0:5.0.30-0jpp_6rh.noarch as a component of Red Hat Satellite v 4.1 (RHEL v.3 AS)
  • tomcat5-0:5.0.30-0jpp_6rh.noarch as a component of Red Hat Satellite v 4.1 (RHEL v.4 AS)
  • tomcat5-0:5.0.30-0jpp_6rh.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)
  • tomcat5-0:5.0.30-0jpp_6rh.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)
  • tyrex-0:1.0.1-2jpp_2rh.noarch as a component of Red Hat Satellite 5.0 (RHEL v.4 AS)
  • tyrex-0:1.0.1-2jpp_2rh.noarch as a component of Red Hat Satellite v 4.0 (RHEL v.3 AS)
  • tyrex-0:1.0.1-2jpp_2rh.noarch as a component of Red Hat Satellite v 4.0 (RHEL v.4 AS)
  • tyrex-0:1.0.1-2jpp_2rh.noarch as a component of Red Hat Satellite v 4.1 (RHEL v.3 AS)
  • tyrex-0:1.0.1-2jpp_2rh.noarch as a component of Red Hat Satellite v 4.1 (RHEL v.4 AS)
  • tyrex-0:1.0.1-2jpp_2rh.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.3 AS)
  • tyrex-0:1.0.1-2jpp_2rh.noarch as a component of Red Hat Satellite v 4.2 (RHEL v.4 AS)

✅ Remediation

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.0.0/html/Installation_Guide/s1-maintenance-update.html

🔗 References (11)